Don't allow changing to an empty password
Don't redirect back to a login page after logging in